88 Commits

Author SHA1 Message Date
aapostoliuk
0e7f0b6e09 dmvpn: T2326: DMVPN Documentation for FRR NHRP implementation
DMVPN Documentation for FRR NHRP implementation.
2025-01-16 17:59:16 +02:00
Viacheslav Hletenko
e07a1a740c Add IPSec base64 secrets 2024-11-27 10:15:31 +02:00
Balazs Szenczy
e835834cde
Update l2tp.rst
Small correction
2024-08-10 19:42:22 +02:00
Christian Breunig
284b5b8e9b ipsec: T6599: add CLI documentation to disable ESP re-key 2024-07-22 12:26:46 +02:00
rebortg
d3ad8cc86c Merge branch 'current' of github.com:vyos/vyos-documentation into current 2024-07-18 21:53:35 +02:00
whyrlpool
873a461bdf
VPN documentation proofreading (#1506)
* Fix typos in openconnect.rst

change Cerbort->Certbot
Update first line to reflect that openconnect was introduced in 1.3-rolling (T2036)

* typo in dmvpn.rst

* ipsec.rst justification, minor phrasing changes

* l2tp.rst justification and phrasing changes.

* sstp.rst phrasing, justification changes

* Update ipsec.rst

rephrase for clarity and to avoid possessive plural apostrophe
2024-07-18 14:02:24 +01:00
srividya0208
cd1dcb5d8e ipsec: Added information about operational commands 2024-07-12 02:33:01 -04:00
rebortg
96039bd2f4 Merge branch 'current' of github.com:vyos/vyos-documentation into current 2024-05-28 12:24:30 +02:00
Nataliia Solomko
30af00bd7f sstp: T4393: Add support to configure host-name (SNI) 2024-05-10 13:13:23 +03:00
aapostoliuk
899acac204 Fixed examples in accel-ppp services in IPv6 section
Fixed examples in accel-ppp services in IPv6 section
2024-04-30 11:18:24 +03:00
rebortg
0a3febc952 fix several build warnings and errors 2024-04-16 21:54:01 +02:00
Robert Göhler
99821111f4
Merge pull request #1300 from aapostoliuk/sstp-circinus
Rewritten the SSTP server documentation
2024-03-05 21:26:56 +01:00
Robert Göhler
2e13660661
Merge pull request #1301 from aapostoliuk/pptp-circinus
Rewritten the PPTP server documentation
2024-03-05 21:26:29 +01:00
Robert Göhler
fd6bbf93a4
Merge pull request #1306 from srividya0208/ipsecedit
addition of missing parameter
2024-03-05 21:25:45 +01:00
srividya0208
4c533eef7f addition of missing parameter 2024-03-05 05:40:22 -05:00
aapostoliuk
d71c4607fa Rewritten the SSTP server documentation
Fully rewritten SSTP server documentation.
2024-03-05 10:32:44 +02:00
aapostoliuk
8cb0070b51 Rewritten the PPTP server documentation
Fully rewritten PPTP server documentation.
2024-03-05 10:30:50 +02:00
Christian Breunig
deb4e15e51 ipsec: add IKEv2 road-warrior documentation 2024-02-27 06:55:42 +01:00
aapostoliuk
4dd84a7c4d Rewritten the L2TP documentation
Rewritten the L2TP documentation
Added the example 'PPPoE over L2TP' to blueprints
2024-02-22 12:08:10 +02:00
aapostoliuk
dd3537443d T5971: Added PPP options documentation
Added PPP options documentation
2024-02-05 10:41:34 +02:00
Robert Göhler
bacd60f419
Merge pull request #1249 from aapostoliuk/T4658-T5953-circinus
Updated DPD and close-action values in IPSEC
2024-01-19 21:13:58 +01:00
aapostoliuk
f5b79621d0 Changed IPv6 pool documentation in accel-ppp services
Changed IPv6 pool documentation in accel-ppp services
to named IPv6 pools.
https://vyos.dev/T5865
2024-01-19 13:38:40 +02:00
aapostoliuk
cfb7e8186d Updated DPD and close-action values in IPSEC
Changed from 'hold' to 'trap' and from 'restart' to 'start'
in close-action.
Changed from 'hold' to 'trap' in DPD action.
2024-01-19 12:39:38 +02:00
fett0
5933ffbe44 ocserv: add http-security-headers documentation 2023-12-27 16:37:24 -03:00
Robert Göhler
f05f2e2b73
Merge pull request #1178 from aapostoliuk/T5688-2-circinus
sstp: T5688: Fixed 'client-ip-pool' configuration in the example
2023-12-11 20:17:59 +01:00
aapostoliuk
f8e26888b9 sstp: T5688: Fixed 'client-ip-pool' configuration in the example
Fixed 'client-ip-pool' configuration in the example
2023-12-08 10:53:21 +02:00
aapostoliuk
1096cbcf95 accel-ppp: T5688: Changing CLI to create client address pool
Changing CLI to create client address pool
2023-12-05 17:30:16 +02:00
Christian Breunig
0429c31788 vpn: update site2site VTI example 2023-12-02 20:54:27 +01:00
Christian Breunig
5953d6f697 ipsec: gre: use dummy interface in example over loopback 2023-11-24 21:29:42 +01:00
greenpsi
f0349e7f1f Nat update
Update some nat commands to new syntax
2023-11-16 00:19:59 +01:00
Daniil Baturin
e4785773bf
Merge pull request #1146 from srividya0208/minor_errors
correction of typos
2023-11-09 13:27:19 +00:00
srividya0208
040472e043 correction of typos 2023-11-09 08:19:04 -05:00
Robert Göhler
7aa0c1ab32
Merge pull request #1126 from srividya0208/ipsec_vips
Added config example of vpn ipsec site-to-site
2023-10-26 13:36:13 +02:00
srividya0208
4d7e44d3e7 Added config example of vpn ipsec site-to-site 2023-10-26 02:00:19 -04:00
Robert Göhler
858e209ef9
Merge pull request #1119 from aslanvyos/patch-8
Update dmvpn.rst
2023-10-19 13:05:10 +02:00
aslanvyos
dc2cfd1f61
Update dmvpn.rst
When we put this command we got an error like:

set interfaces tunnel tun100 local-ip '192.0.2.1'

  Configuration path: interfaces tunnel tun100 [local-ip] is not valid
  Set failed
2023-10-18 17:44:00 +04:00
aslanvyos
d3ef41c38f
Update site2site_ipsec.rst
To make easily understandable the Site-to-Site VPN ikev2 configuration for users (especially if the user is new to VyOS) made the following changes:
- Added dummy interface to both routers for testing purposes
- Added static route for both routers for dummy interface
- Added this line of command: 
   set vpn ipsec option disable-route-autoinstall
   Because when we write this line after the commit action we got an error like:
WARNING: It's recommended to use ipsec vti with the next command

- corrected this line:
  set vpn ipsec site-to-site peer OFFICE-B local-address '192.168.0.10'
to this:
set vpn ipsec site-to-site peer OFFICE-B local-address '172.18.201.10'
2023-10-18 15:24:39 +04:00
srividya0208
3f7e9a6de9 Added details about ipsec remote-access 2023-09-28 02:41:47 -04:00
srividya0208
54bdc76b3b correction of ipsec compression syntax and added a reference
for changes done for zone based firewall
2023-09-04 02:49:17 -04:00
srividya0208
56f0d12968 corrected the l2tp op command 2023-06-13 04:01:24 -04:00
Robert Göhler
c417c7c6b6
Update openconnect.rst correct code-block 2023-05-20 21:17:23 +02:00
Jamie Austin
424669f4b0
ocserv: fix: indent of warning section text overflowing outside the warning box 2023-05-19 19:33:02 +10:00
Jamie Austin
aa77ce484a
T3896: ocserv: openconnect: document identity based configuration 2023-05-17 15:27:34 +10:00
Christian Breunig
f5e141d718 tunnel: T5034: migrate "multicast enable" CLI node to enable-multicast 2023-02-26 08:15:58 +01:00
Viacheslav Hletenko
8f61920f01 Change IPsec authentication PSK and examples 2023-02-05 12:22:36 +00:00
rebortg
ee91e1d5c1 fix build warnings and errors 2023-01-31 21:46:57 +01:00
Jamie Austin
e041874a9d
T4958: ocserv: openconnect: document RADIUS accounting 2023-01-29 10:51:54 +11:00
aapostoliuk
3711f087a3 ipsec: T4925: Added PRF information in IPSEC documentation
Added Pseudo-Random Functions (PRF) information
in IPSEC documentation.
2023-01-19 16:09:04 +02:00
rebortg
27ba499869 fix closeaction image 2023-01-03 20:37:50 +01:00
srividya0208
67c16e7f3a close-action: image reference is modified from image to figure 2023-01-02 22:33:11 -05:00